osb.co.ad.specsavers.com
- Specsavers Optical Group Limited -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 0b:4b:00:6a:fc:db:04:4d:1a:4e:72:28:60:5c:a4:45 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Specsavers Optical Group Limited
Organization:
Specsavers Optical Group Limited
Organization unit: SOG IT
Organization unit: SOG IT
State / Province:
Channel Islands
Locality: Guernsey
Country: GG
Locality: Guernsey
Country: GG
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:4b:00:6a:fc:db:04:4d:1a:4e:72:28:60:5c:a4:45Serial Number (int): 15010938694464410727336814076466340933
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 50:69:a7:f0:69:21:d7:3e:cb:33:cb:4a:21:0c:ec:cd:2b:17:cd:8d
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): 88:fd:ac:75:9d:16:48:af:19:44:51:7a:15:fc:ab:51:37:68:8d:1c
Fingerprint (sha256): 05:33:69:ae:e2:d7:33:69:00:ba:cd:a0:0e:44:fa:76:35:36:46:ba:2a:75:c6:2d:12:56:3d:c0:79:a9:66:11
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate osb.co.ad.specsavers.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for osb.co.ad.specsavers.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
osb.co.ad.specsavers.com
Other certificates including the domain name specsavers.com
(limited to 100 certificates)
ebssitx.az.specsavers.com
hyptst.az.specsavers.com
apipot-management.az.specsavers.com
oemnpbi.az.specsavers.com
*.bookings.specsavers.com
ssl503523.cloudflaressl.com
ukhs-slvapp47.uk.specsavers.com
sonarqube-dev.apps.specsavers.com
openaccounts-uat.gg.specsavers.com
ssl503525.cloudflaressl.com
gglv-smacfile02.gg.specsavers.com
openaccounts-smt.gg.specsavers.com
sodprf.az.specsavers.com
spark-emea.ad.specsavers.com
oidadmprf.az.specsavers.com
esmt.apps.specsavers.com
osb.co.ad.specsavers.com
adfuat.az.specsavers.com
ebssitx.az.specsavers.com
adbuilder.specsavers.com
jhsams.co.ad.specsavers.com
bb-emea.internal.specsavers.com
airwatchds.specsavers.com
oiddsmpre.co.ad.specsavers.com
omsprf.az.specsavers.com
osb.co.ad.specsavers.com
apiportal.ad.specsavers.com
edqpre3.ad.specsavers.com
retailcomms.ec.specsavers.com
vc.specsavers.com
gglv-smacswupd.gg.specsavers.com
odiprd.co.ad.specsavers.com
soaprf.az.specsavers.com
vcpprd.co.ad.specsavers.com
sclub.specsavers.com
osbsit.az.specsavers.com
specslink-no.specsavers.com
adfs.specsavers.com
voemaprd2.co.ad.specsavers.com
hubbletest.az.specsavers.com
adfpre.co.ad.specsavers.com
EDQOCHSIT.co.ad.specsavers.com
airwatchcn.specsavers.com
ap-sodtat.az.specsavers.com
terpander.gg.specsavers.com
mftdsit.az.specsavers.com
join.specsavers.com
dem.co.ad.specsavers.com
ap-sodtat.az.specsavers.com
edqsit.ad.specsavers.com
asaudiopaddr.apps.specsavers.com
stibo.apps.specsavers.com
ebsuat.az.specsavers.com
orchestrator-emea.apps.specsavers.com
specsavers.com
fridm-dev.ad.specsavers.com
vcpuat.az.specsavers.com
rundeck.gg.specsavers.com
mftdsit.az.specsavers.com
oidadmprd.co.ad.specsavers.com
content.specsavers.com
oemnp.az.specsavers.com
demuat.az.specsavers.com
sas.1195.manchesterfort.specsavers.com
vcpsit.az.specsavers.com
*.bookings.specsavers.com
iron.specsavers.com
ssl332136.cloudflaressl.com
sod.co.ad.specsavers.com
apipot.az.specsavers.com
odisit.az.specsavers.com
adfs.specsavers.com
shsdub.co.ad.specsavers.com
dhue-emea.ad.specsavers.com
oraclesob.gg.specsavers.com
odisit.az.specsavers.com
sni.cloudflaressl.com
audiopadpre02.apps.specsavers.com
iron2.specsavers.com
airwatchcnintuat.specsavers.com
dresourcemgr-emea.ad.specsavers.com
audiopadpre01.apps.specsavers.com
odiqa.co.ad.specsavers.com
notification.specsavers.com
ukao-slvapp47.uk.specsavers.com
gitscm.uk.specsavers.com
rtnsvcdev.ad.specsavers.com
grafanadr-emea.ad.specsavers.com
vendorportal.specsavers.com
gglv-smdc01.gg.specsavers.com
nevtest_sha1.specsavers.com
stibo-qa.specsavers.com
sso.co.ad.specsavers.com
ap-osbtst.az.specsavers.com
booking.specsavers.com
ochdevmig.ad.specsavers.com
app-genesysescrow.specsavers.com
spvwa.ad.specsavers.com
soduat.az.specsavers.com
soapre.co.ad.specsavers.com
hyptst.az.specsavers.com
apipot-management.az.specsavers.com
oemnpbi.az.specsavers.com
*.bookings.specsavers.com
ssl503523.cloudflaressl.com
ukhs-slvapp47.uk.specsavers.com
sonarqube-dev.apps.specsavers.com
openaccounts-uat.gg.specsavers.com
ssl503525.cloudflaressl.com
gglv-smacfile02.gg.specsavers.com
openaccounts-smt.gg.specsavers.com
sodprf.az.specsavers.com
spark-emea.ad.specsavers.com
oidadmprf.az.specsavers.com
esmt.apps.specsavers.com
osb.co.ad.specsavers.com
adfuat.az.specsavers.com
ebssitx.az.specsavers.com
adbuilder.specsavers.com
jhsams.co.ad.specsavers.com
bb-emea.internal.specsavers.com
airwatchds.specsavers.com
oiddsmpre.co.ad.specsavers.com
omsprf.az.specsavers.com
osb.co.ad.specsavers.com
apiportal.ad.specsavers.com
edqpre3.ad.specsavers.com
retailcomms.ec.specsavers.com
vc.specsavers.com
gglv-smacswupd.gg.specsavers.com
odiprd.co.ad.specsavers.com
soaprf.az.specsavers.com
vcpprd.co.ad.specsavers.com
sclub.specsavers.com
osbsit.az.specsavers.com
specslink-no.specsavers.com
adfs.specsavers.com
voemaprd2.co.ad.specsavers.com
hubbletest.az.specsavers.com
adfpre.co.ad.specsavers.com
EDQOCHSIT.co.ad.specsavers.com
airwatchcn.specsavers.com
ap-sodtat.az.specsavers.com
terpander.gg.specsavers.com
mftdsit.az.specsavers.com
join.specsavers.com
dem.co.ad.specsavers.com
ap-sodtat.az.specsavers.com
edqsit.ad.specsavers.com
asaudiopaddr.apps.specsavers.com
stibo.apps.specsavers.com
ebsuat.az.specsavers.com
orchestrator-emea.apps.specsavers.com
specsavers.com
fridm-dev.ad.specsavers.com
vcpuat.az.specsavers.com
rundeck.gg.specsavers.com
mftdsit.az.specsavers.com
oidadmprd.co.ad.specsavers.com
content.specsavers.com
oemnp.az.specsavers.com
demuat.az.specsavers.com
sas.1195.manchesterfort.specsavers.com
vcpsit.az.specsavers.com
*.bookings.specsavers.com
iron.specsavers.com
ssl332136.cloudflaressl.com
sod.co.ad.specsavers.com
apipot.az.specsavers.com
odisit.az.specsavers.com
adfs.specsavers.com
shsdub.co.ad.specsavers.com
dhue-emea.ad.specsavers.com
oraclesob.gg.specsavers.com
odisit.az.specsavers.com
sni.cloudflaressl.com
audiopadpre02.apps.specsavers.com
iron2.specsavers.com
airwatchcnintuat.specsavers.com
dresourcemgr-emea.ad.specsavers.com
audiopadpre01.apps.specsavers.com
odiqa.co.ad.specsavers.com
notification.specsavers.com
ukao-slvapp47.uk.specsavers.com
gitscm.uk.specsavers.com
rtnsvcdev.ad.specsavers.com
grafanadr-emea.ad.specsavers.com
vendorportal.specsavers.com
gglv-smdc01.gg.specsavers.com
nevtest_sha1.specsavers.com
stibo-qa.specsavers.com
sso.co.ad.specsavers.com
ap-osbtst.az.specsavers.com
booking.specsavers.com
ochdevmig.ad.specsavers.com
app-genesysescrow.specsavers.com
spvwa.ad.specsavers.com
soduat.az.specsavers.com
soapre.co.ad.specsavers.com
Certificate
The complete raw certificate details for osb.co.ad.specsavers.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIQC0sAavzbBE0aTnIoYFykRTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwNTAxMDAwMDAwWhcNMjEwNTA4MTIw MDAwWjCBmTELMAkGA1UEBhMCR0cxGDAWBgNVBAgTD0NoYW5uZWwgSXNsYW5kczER MA8GA1UEBxMIR3Vlcm5zZXkxKTAnBgNVBAoTIFNwZWNzYXZlcnMgT3B0aWNhbCBH cm91cCBMaW1pdGVkMQ8wDQYDVQQLEwZTT0cgSVQxITAfBgNVBAMTGG9zYi5jby5h ZC5zcGVjc2F2ZXJzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMTCtNluvDgWdoAIMKAkvT0UwxFl5i1piiPE5zB8DwlIS0Ze4+AEURs3vZ6YJXcN 6ZD9IvFLE7I/4MLhT7L/0bECw62admX5gjDasx8i1soBryJ+1qGX6AtGql/CTFcR IsKcGCcr+iMXgkk46+Y7fjs1qIrOCQqM1epsp4Fb5wmCrtvRRDJFD7dxMAAjj1uD UjZyFFldIU2+a+9y2SecmXBkkuWUrmTybAbdo5STx2xymoK/vqrgMjiJQ5jjnZnT oGrTuFbGFEhKhaSVaSCI9mnFeyfv2ppYb89wptf+TelifTo2HnwM/BbhgNBa5+wf 3v1HMeLT1YU5GAzwx5bxxRUCAwEAAaOCAfUwggHxMB8GA1UdIwQYMBaAFCRuKy3Q apJRUSVpAaqaR6aJ50AgMB0GA1UdDgQWBBRQaafwaSHXPsszy0ohDOzNKxfNjTAj BgNVHREEHDAaghhvc2IuY28uYWQuc3BlY3NhdmVycy5jb20wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB3BgNVHR8EcDBuMDWg M6Axhi9odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcy LmNybDA1oDOgMYYvaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xv YmFsQ0FHMi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcC ARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdAYIKwYB BQUHAQEEaDBmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20w PgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy dEdsb2JhbENBRzIuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAIIlZJnO/rhxkU0vePh95MaC23BeFLnTvJqHdk10 AswZ9Ax1xaKV+5S0c1ipWNQMMSPEEl3dX8UasQxy69pZVf72V31Q7t0JvF9FcWfM DUho4hq/7dvWOcI4or1X5pdgipaX2Yo4DU/HwlZxJ3lw2UagPVyJDMF6/cD6maPS ZawEth3i3lEY9tFKh8lE2qT8iXc1SW4Goi45hMMr1KM0JshTwmikOymkg/c48QHa wH2W3m3F6NNVxQRtPe9vWsTFCQUoT6rj8yIorIDDnEMZ5CIF+97SAjQoCN1kSZRf ecF/IT6GYWJPQ59lhKi5UNANF4KrAdiU5OuMqSAynQQiMTw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMK02W68OBZ2gAgwoCS9 PRTDEWXmLWmKI8TnMHwPCUhLRl7j4ARRGze9npgldw3pkP0i8UsTsj/gwuFPsv/R sQLDrZp2ZfmCMNqzHyLWygGvIn7WoZfoC0aqX8JMVxEiwpwYJyv6IxeCSTjr5jt+ OzWois4JCozV6myngVvnCYKu29FEMkUPt3EwACOPW4NSNnIUWV0hTb5r73LZJ5yZ cGSS5ZSuZPJsBt2jlJPHbHKagr++quAyOIlDmOOdmdOgatO4VsYUSEqFpJVpIIj2 acV7J+/amlhvz3Cm1/5N6WJ9OjYefAz8FuGA0Frn7B/e/Ucx4tPVhTkYDPDHlvHF FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15010938694464410727336814076466340933 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Channel Islands' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Guernsey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Specsavers Optical Group Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOG IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'osb.co.ad.specsavers.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24838721098736885975435928504204512349148455047702932790610678841897927126688967706289764123884170312311057125334412014616746396454288811150172476118916539437369538562147903669836803928431424300627437861353297219074866004673854454701335290695193741692452166957468986783296365255409071969058855361880316780029514045519742433129470058651494823588509282078585196442322031976324910957554694611513387110860834299260869738571604673919692613265620976053999634193546861708057858343589290121452893614857528012178323479510866787593732653943187000790301235886609590311425454901540892315657986706906728791349562907569294073251093 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5069a7f06921d73ecb33cb4a210ceccd2b17cd8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osb.co.ad.specsavers.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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